Lehigh Valley Restaurant Brands Data Breach Lawsuit Investigation

Active investigation · Free, confidential case review
Call (954) 799-5914
Data Breaches / Lehigh Valley Restaurant Brands
Active investigation Data breach · Restaurant Notices mailed Aug 6, 2026

Received an August 2026 breach notice from Lehigh Valley Restaurant Brands?

Dapeer Law, P.A. is investigating a potential class action against Lehigh Valley Restaurant Brands, an Allentown, Pennsylvania restaurant operator affiliated with Lehigh Valley Restaurant Group, on behalf of individuals whose Social Security numbers may have been exposed in the data security incident the company began disclosing in August 2026.

Submit your claim See what to do No fee unless we recover for you
Breach window
Not disclosed
Incident dates withheld, notice cites Massachusetts limits on what can be shared
Notification delay
Not disclosed
Discovery date not stated, notices mailed Aug 2026
Credit monitoring
24 months
Single-bureau monitoring through Cyberscout (TransUnion)
Eligibility

Who may qualify

You may be eligible to participate in a class action if any of the following applies:

  • You received a data breach notification letter from Lehigh Valley Restaurant Brands dated August 2026.
  • Your letter offered enrollment in 24 months of free Cyberscout credit monitoring, credit report, and credit score services.
  • You had personal information, including your Social Security number, held by Lehigh Valley Restaurant Brands in its capacity as an employer or restaurant operator.
  • No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
  • Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.

Not sure if you qualify?

Send us your notice, we'll confirm your eligibility at no cost.

Check eligibility
Background

What happened

Lehigh Valley Restaurant Brands reported a data security incident to the Massachusetts Attorney General's Office affecting a small group of individuals. The filing identifies Social Security numbers as the category of personal information involved. The notice letter sent to affected individuals does not describe the cause of the incident, the dates on which it occurred, or when the company discovered it, and it states that Massachusetts law limits the information the company can share about the incident.

According to the company, it completed an internal review of the affected data, secured the resources needed to send notifications, and arranged complimentary identity-monitoring services before mailing letters on August 6, 2026. The filing reports that 8 individuals were affected. Affected individuals are being offered 24 months of Single-Bureau Credit Monitoring, along with a credit report, credit score, and proactive fraud-assistance services through Cyberscout, a TransUnion company, and must enroll within 90 days of the date on the letter. The company states that it takes the security of information in its care seriously.

Social Security numbers are permanent identifiers that cannot be reissued as easily as a password or a payment card, and they can be misused for identity theft, synthetic-identity fraud, fraudulent tax filings, and new-account fraud for years after a breach. Dapeer Law is evaluating whether Lehigh Valley Restaurant Brands used reasonable data-security practices, whether it notified affected individuals in a timely manner, and whether notice recipients may be entitled to relief under state breach-notification and consumer-protection laws.

Social Security numbers Restaurant industry Employee data Massachusetts Attorney General filing Cyberscout monitoring
Action plan

What to do if you received a letter

1

Keep your notice letter

Do not discard it. Your letter contains the enrollment code for the Cyberscout credit monitoring and is important evidence if you decide to participate in a lawsuit.

2

Enroll in the free 24-month credit monitoring

Enroll in the Cyberscout (TransUnion) monitoring offered in your letter within 90 days of the letter date. Accepting this benefit does not waive your right to pursue legal action.

3

Place a fraud alert or credit freeze

Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because Social Security numbers were involved, also watch for unfamiliar accounts on your credit reports and for any notice that a tax return was filed in your name.

4

Speak with a data breach attorney

Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options, and advise whether you may be eligible to join a class action.

Submit your notice for a free review

Two minutes online. A licensed attorney reviews every submission.

Submit your claim
Timeline

Breach timeline

Date not disclosed Passed
Security incident involving personal information occurs
Date not disclosed Passed
Internal review of the affected data completed
August 6, 2026 Passed
Notice letters mailed, filing made with the Massachusetts Attorney General
About November 4, 2026 Active
Deadline to enroll in the free Cyberscout credit monitoring, 90 days from the letter date
Pending Active
Potential class action filing
Statutes of limitations vary by state and legal theory, typically one to six years. Waiting can permanently bar your claim.
Possible recovery

Compensation you may be entitled to

Out-of-pocket expenses

Credit freezes, identity restoration services, and other costs incurred responding to the breach.

Time spent monitoring

Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.

Identity theft & fraud losses

Unreimbursed funds stolen from accounts, unauthorized credit lines, tax-refund fraud, or tax refund fraud tied to the breach.

Statutory damages

Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.

Injunctive relief

Court orders requiring Lehigh Valley Restaurant Brands to implement stronger data-security practices going forward.

Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.

FAQ

Common questions

I received a data breach letter from Lehigh Valley Restaurant Brands. What should I do? +

Keep your August 6, 2026 letter, since it contains your Cyberscout enrollment code and serves as evidence. Enroll in the free 24-month credit monitoring within 90 days of the letter date, review your bank and credit-card statements for unfamiliar activity, and consider placing a free fraud alert or security freeze with Equifax, Experian, and TransUnion. Because Social Security numbers were involved, also watch for new accounts opened in your name and for tax filings you did not submit. The company's assistance line is 1-855-308-7510.

Am I eligible to join a class action against Lehigh Valley Restaurant Brands? +

Individuals who received a Lehigh Valley Restaurant Brands breach notice dated August 6, 2026 likely qualify for a free case review. Factors that affect eligibility include your state of residence, the categories of data listed in your letter, and any documented losses or time spent responding to the incident.

How much money could I receive from a class action lawsuit? +

Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.

What personal information was exposed in the breach? +

The filing with the Massachusetts Attorney General identifies Social Security numbers as the personal information involved. The notice letter itself does not itemize the data elements and states that Massachusetts law limits what the company can share, so other information may also have been affected. Check your individual letter, and call the company's assistance line at 1-855-308-7510 if it does not specify which of your data elements were involved.

Did Lehigh Valley Restaurant Brands offer free credit monitoring? +

Yes. Lehigh Valley Restaurant Brands is offering 24 months of Single-Bureau Credit Monitoring, plus a credit report, credit score, and proactive fraud-assistance services through Cyberscout, a TransUnion company. Enrollment must be completed within 90 days of the date on your letter. Enrolling does not waive your right to pursue a claim.

How many people were affected by the Lehigh Valley Restaurant Brands breach? +

The company reported the incident to the Massachusetts Attorney General as affecting 8 individuals. That figure reflects what was disclosed in that filing, and the total across all states may be higher. This page will be updated if additional figures are disclosed.

Is there a deadline to take legal action? +

Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.

How do I get a copy of the official breach notice? +

The notice was filed with the Massachusetts Attorney General's Office and a copy is linked in the Sources section of this page. Dapeer Law can also help you obtain a copy during a free consultation.

References

Sources & references

Attorney advertising. This page is provided for informational purposes only. It does not constitute legal advice or form an attorney-client relationship. Dapeer Law, P.A. is not affiliated with Lehigh Valley Restaurant Brands, Cyberscout, or any credit bureau. Prior results do not guarantee a similar outcome. All information regarding the data incident is drawn from the official notification filed with Massachusetts Attorney General on August 6, 2026.
Free, confidential case review

Don't let the deadline decide for you. Submit your claim today.

You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.

Why Dapeer Law

Practice focusConsumer class actions
Licensed inFL · NY · NJ · IL
Case review fee$0
Response timeSame business day
Free case review
Confidential · 2 minutes
Submit claim →
Next
Next

dbHMS Data Breach Lawsuit Investigation